AfrexAI Lead Hunter Pro
v1.0.0Enterprise-grade B2B lead generation, enrichment, scoring, and outreach sequencing for AI agents. Find ideal prospects, enrich with verified data, score against your ICP, and generate personalized outreach — all autonomously.
⭐ 0· 663·0 current·0 all-time
by@1kalin
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The stated purpose (B2B discovery → enrichment → scoring → outreach → CRM) aligns with the SKILL.md and README content: search templates, enrichment checklist, scoring rubric, and outreach templates are present. However, several advertised capabilities ("verified" email/phone enrichment, sending outreach sequences, CRM pipeline management, and paid context packs) normally require external services or credentials (email verification providers, SMTP/SendGrid, CRM API tokens). The skill declares no required env vars or connectors, which is unexpected.
Instruction Scope
The runtime instructions focus on web search, visiting company sites, extracting public signals, deduplication, scoring, and creating lead records — all within the described lead-gen scope. The SKILL.md does not instruct reading local files or unrelated system state. A concern is vagueness around how outreach is executed (how emails/LinkedIn messages are sent or tracked) and how "verified" data is obtained; that vagueness grants broad discretion to the agent at runtime.
Install Mechanism
No install spec or code is included (instruction-only), so there is no download/execution risk from an installer. This is low-risk from an install perspective.
Credentials
Given features like email/phone verification, CRM updates, and automated outreach, the absence of declared required environment variables or primary credentials is disproportionate. Real-world operation typically needs API keys or SMTP/CRM credentials; the skill's omission is an incoherence that could hide runtime prompts for credentials or rely on the agent to use arbitrary connectors, increasing risk of accidental exposure or misconfiguration.
Persistence & Privilege
The skill does not request always:true and does not declare persistent system changes. It can be invoked autonomously (platform default), which is expected for an automation skill. Note: autonomous outreach combined with unspecified outbound channels increases procedural risk if given broad permissions.
What to consider before installing
This skill mostly contains templates and workflows for public web discovery and scoring, which is coherent, but it advertises "verified" enrichment and autonomous outreach without listing which services or credentials it will use. Before installing or enabling autonomous runs, ask the publisher: (1) which external APIs or services are required (email verifiers, CRM APIs, SMTP providers, LinkedIn automation), and provide the exact env vars the skill will need; (2) where does enriched data get sent/stored and who can access it; (3) whether outreach messages will be sent automatically and via which account (use a sandbox/test account first); (4) for paid context packs, confirm the external payment/hosted URL and vendor legitimacy. If you must proceed, supply least-privilege, single-purpose credentials (test CRM account, dedicated outbound email) and monitor initial runs. If the publisher cannot specify required connectors or still expects you to provide broad account tokens, decline or treat as untrusted.Like a lobster shell, security has layers — review code before you run it.
b2bvk97bkd5b0vedapc358fhbw3fhx812g63cold-emailvk97bkd5b0vedapc358fhbw3fhx812g63crmvk97bkd5b0vedapc358fhbw3fhx812g63enrichmentvk97bkd5b0vedapc358fhbw3fhx812g63icpvk97bkd5b0vedapc358fhbw3fhx812g63latestvk97bkd5b0vedapc358fhbw3fhx812g63leadsvk97bkd5b0vedapc358fhbw3fhx812g63outreachvk97bkd5b0vedapc358fhbw3fhx812g63pipelinevk97bkd5b0vedapc358fhbw3fhx812g63prospectingvk97bkd5b0vedapc358fhbw3fhx812g63salesvk97bkd5b0vedapc358fhbw3fhx812g63
License
MIT-0
Free to use, modify, and redistribute. No attribution required.